TI-2024-02762 CVE-2024-2954 · GHSA-rx45-mwg6-x9hqSQL injection in jonathankissam Action NetworkPriority LOW 35The Action Network plugin for WordPress is vulnerable to SQL Injection via the 'bulk-action' parameter in version 1.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th…CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00621 · Published 2024-03-27 · No fix listed CWE-89